RE: [Snort-users] What are the differences between and IPS and IDS?

permalink · #1 (**permalink**) 10-02-2003

This is a multi-part message in MIME format.

------=_NextPart_000_002A_01C3886B.237D7A90
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: 7bit

Kavita,

In Short.

IPS is a Firewall - Actually blocks traffic

IDS is Snort - Only alerts on traffic

This is one on the BIG misconceptions of Snort. People expect it to actually
protect their system and that is not what it was designed to do.

Cheers...

-Michael Steele
--
System Engineer / Security Support Technician
mailto:michaels@winsnort.com
Website: http://www.winsnort.com
Snort: Open Source Network IDS - http://www.snort.org

_____

From: snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Chhabria,
Kavita - Apogent
Sent: Wednesday, October 01, 2003 12:41 PM
To: 'snort-users@lists.sourceforge.net'
Subject: [Snort-users] What are the differences between and IPS and IDS?

Hello all:

I would like to understand the differences between IDS and IPS. We are
planning on installing snort and snortcenter and ACID, however, I have very
limited knowledge of what and IPS is, so I would like to understand it in
depth, more importantly, understand the diff bet IPS and IDS so that I am
sure that we are making

the right decision to go with an IDS as opposed to an IPS.

Please provide me with the differences and advantages and disadvantages of
each approach?

Thanks a lot,

Kavita Chhabria

Systems Developer

Apogent Technologies

(269) 544-7515

<mailto:kchhabria@apogent.com> kchhabria@apogent.com

------=_NextPart_000_002A_01C3886B.237D7A90
Content-Type: text/html;
charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable

<html>

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered)">
<title>Message</title>
<style>

</style>

</head>

<body lang=3DEN-US link=3Dblue vlink=3Dblue>

<div class=3DSection1>

Kavita,

 

In Short…

 

IPS is a Firewall – Actually blocks =
traffic

IDS is Snort – Only alerts on =
traffic

 

This is one on the BIG misconceptions of Snort. =
People
expect it to actually protect their system and that is not what it was =
designed
to do.

<div>

Cheers... 
 
-Michael Steele 
-- 
 System Engineer / Security Support =
Technician     
 <a =
href=3D"mailto:michaels@winsnort.com">mailto:micha els@winsnort.com</a>&nb=
sp;   
 Website: <a =
href=3D"http://www.winsnort.com">http://www.winsnort.com</a> 
 Snort: Open Source Network IDS - <a =
href=3D"http://www.snort.org">http://www.snort.org</a>

</div>

<div>

<div class=3DMsoNormal align=3Dcenter style=3D'text-align:center'>

<hr size=3D2 width=3D"100%" align=3Dcenter tabindex=3D-1>

</div>

From:
snort-users-admin@lists.sourceforge.net
[mailto:snort-users-admin@lists.sourceforge.net] On Behalf Of Chhabria, Kavita - Apogent 
Sent: Wednesday, October =
01, 2003
12:41 PM 
To:
'snort-users@lists.sourceforge.net' 
Subject: [Snort-users] =
What are
the differences between and IPS and IDS?

</div>

 

<div>

Hello all:

</div>

<div>

 

</div>

<div>

I would like to understand the differences between =
IDS and
IPS.  We are planning on installing snort and snortcenter and ACID,
however, I have very limited knowledge of what and IPS is, so I would =
like to
understand it in depth, more importantly, understand the diff bet IPS =
and IDS
so that I am sure that we are making 

</div>

<div>

the right decision to go with an IDS as opposed to an =
IPS.

</div>

<div>

 

</div>

<div>

Please provide me with the differences and advantages =
and
disadvantages of each approach?

</div>

<div>

 

</div>

<div>

Thanks a lot,

</div>

<div>

 

</div>

Kavita Chhabria

Systems Developer

Apogent Technologies

(269) 544-7515

<a href=3D"mailto:kchhabria@apogent.com">kchhabria@apogent.com=
</a>

<div>

 

</div>

</div>

</body>

</html>

------=_NextPart_000_002A_01C3886B.237D7A90--

-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/...fo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.p...st=snort-users

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode